$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/efc9af7b-6c12-334f-a305-5300425dcf37.roa File: efc9af7b-6c12-334f-a305-5300425dcf37.roa (raw, json) Hash identifier: 5dKYhmjoQPyEgPmsqvU1fiNmuR+2GgdAYMqCZ9rQi4k= Subject key identifier: F0:DF:C1:63:56:41:60:30:F8:D5:C9:76:FC:10:E8:61:F5:23:FA:B9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C7F1E765E0F7A43C7B480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/efc9af7b-6c12-334f-a305-5300425dcf37.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.161.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:7f:1e:76:5e:0f:7a:43:c7:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=361ba8f5-6bdc-4e46-a129-02f4000df57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d6:4d:32:0a:76:b1:79:60:86:48:c9:20:99: 89:7e:64:72:56:d3:5c:1d:dc:9c:d2:c7:88:56:c6: aa:dd:98:17:0f:07:c3:b5:6b:9b:38:24:a7:72:7e: 21:2d:26:4a:62:ea:48:f6:8e:7b:ea:ef:06:87:c4: 9f:f8:e3:d9:17:2f:43:9d:c9:cd:fd:cf:cb:83:08: 96:70:2d:fe:58:69:17:54:27:13:63:b4:c2:42:a3: 4c:6e:0a:1e:24:2e:7d:a3:5d:0b:a5:e7:6e:e9:cf: cb:ed:7a:27:e6:b9:d4:e3:83:80:57:f9:33:01:cc: 6a:70:01:b6:cc:2f:d9:30:09:d3:8e:6f:aa:1f:97: e8:93:81:5d:d9:4f:43:9c:07:85:02:9b:e5:00:89: c5:31:d6:98:0f:e8:25:e5:0e:82:92:7f:b9:2d:81: 9b:4e:7d:a3:d3:1b:e6:4c:f6:0a:61:49:95:1e:4d: 74:67:48:0e:e6:19:7d:14:c5:64:36:a2:76:e6:3d: c3:6c:28:e9:23:1a:66:1c:39:c9:17:ea:4d:ad:53: 23:8f:12:bd:c2:76:8e:ba:85:a0:e5:56:1a:35:25: c9:47:9e:04:bb:0e:fb:53:50:78:82:59:bf:22:dc: 05:c2:37:b0:49:8a:78:27:67:e3:a1:55:88:0f:3f: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DF:C1:63:56:41:60:30:F8:D5:C9:76:FC:10:E8:61:F5:23:FA:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/efc9af7b-6c12-334f-a305-5300425dcf37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:63:c4:f7:d3:ac:69:65:46:39:95:ad:b9:11:30:66:d0:a7: 7a:fd:52:29:0d:71:76:3d:fb:bd:78:8e:c8:36:3d:97:30:0c: 30:3f:1e:bb:0e:ad:d6:93:bd:23:8c:37:02:28:4b:02:ab:02: 7f:a3:00:e7:01:1e:02:33:3b:ba:2c:7b:9d:c1:b1:e0:8b:b1: 3c:90:30:e5:63:18:fc:7e:5c:64:ef:30:32:8a:88:ea:8f:93: ca:94:2b:23:2d:d3:5f:e9:a9:11:ea:49:20:91:6a:be:f8:a9: db:9f:9d:57:ad:fe:7d:04:98:e0:2c:2c:18:2b:33:3a:67:9f: 39:00:b7:f3:0a:f0:c2:2e:c4:3a:31:a5:8d:43:10:27:33:2f: 01:2d:56:19:9a:10:e1:e3:a8:06:8d:9d:16:46:51:0c:36:94: b7:e0:73:62:00:8f:6b:7b:b1:03:91:97:29:9c:b7:4a:ec:3b: 6a:b9:2c:20:ad:15:d2:5b:35:6c:6a:5e:f0:5d:87:b8:25:42: c2:a2:cf:8b:4f:73:d0:9e:6d:d3:23:42:5a:6a:e8:f6:88:10: 19:1a:be:d8:81:37:89:c3:60:fd:30:9d:5c:bf:3f:4c:70:d6: e0:c0:82:e3:69:b2:a5:c1:92:36:0a:1a:d6:c8:51:60:e8:f1: 52:14:9b:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnH8edl4PekPHtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MzYxYmE4ZjUtNmJkYy00ZTQ2LWExMjktMDJmNDAwMGRmNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9ZNMgp2sXlghkjJIJmJfmRyVtNcHdyc0seI Vsaq3ZgXDwfDtWubOCSncn4hLSZKYupI9o576u8Gh8Sf+OPZFy9DncnN/c/LgwiW cC3+WGkXVCcTY7TCQqNMbgoeJC59o10Lpedu6c/L7Xon5rnU44OAV/kzAcxqcAG2 zC/ZMAnTjm+qH5fok4Fd2U9DnAeFApvlAInFMdaYD+gl5Q6Ckn+5LYGbTn2j0xvm TPYKYUmVHk10Z0gO5hl9FMVkNqJ25j3DbCjpIxpmHDnJF+pNrVMjjxK9wnaOuoWg 5VYaNSXJR54Euw77U1B4glm/ItwFwjewSYp4J2fjoVWIDz+azQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDfwWNWQWAw+NXJdvwQ6GH1I/q5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWZjOWFmN2ItNmMxMi0z MzRmLWEzMDUtNTMwMDQyNWRjZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqGmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpjxPfTrGllRjmVrbkRMGbQp3r9UikNcXY9+714jsg2PZcwDDA/HrsO rdaTvSOMNwIoSwKrAn+jAOcBHgIzO7ose53BseCLsTyQMOVjGPx+XGTvMDKKiOqP k8qUKyMt01/pqRHqSSCRar74qdufnVet/n0EmOAsLBgrMzpnnzkAt/MK8MIuxDox pY1DECczLwEtVhmaEOHjqAaNnRZGUQw2lLfgc2IAj2t7sQORlymct0rsO2q5LCCt FdJbNWxqXvBdh7glQsKiz4tPc9CebdMjQlpq6PaIEBkavtiBN4nDYP0wnVy/P0xw 1uDAguNpsqXBkjYKGtbIUWDo8VIUmzE= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:30 2025 by rpki-client